Strix
26.1K

CVE-2023-5680

MEDIUMCVSS 5.3/10EPSS 0.62%

Last modified

CVE-2023-5680 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache database node for this name can significantly impair query performance. This issue affects BIND 9 versions 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.. EPSS estimates a 0.62% chance of exploitation in the next 30 days.

Description

If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache database node for this name can significantly impair query performance. This issue affects BIND 9 versions 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.

Metrics

CVSS 3.1
5.3/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS Probability
0.62%

45.3th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersionsUpdate
IscBind9.11.3S1
IscBind9.11.4S1
IscBind9.11.5S3
IscBind9.11.6S1
IscBind9.11.7S1
IscBind9.11.8S1
IscBind9.11.12S1
IscBind9.11.21S1
IscBind9.11.27S1
IscBind9.11.29S1
IscBind9.11.35S1
IscBind9.11.37S1
IscBind9.16.8S1
IscBind9.16.11S1
IscBind9.16.12S1
IscBind9.16.13S1
IscBind9.16.14S1
IscBind9.16.21S1
IscBind9.16.32S1
IscBind9.16.36S1
IscBind9.16.43S1
IscBind9.18.11S1
IscBind9.18.18S1
IscBind9.18.21S1
NetappActive Iq Unified ManagerAll versions—

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2023-5680?
If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache database node for this name can significantly impair query performance. This issue affects BIND 9 versions 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.
How severe is CVE-2023-5680?
CVE-2023-5680 has a CVSS score of 5.3/10 (MEDIUM severity). The EPSS model estimates a 0.62% probability of exploitation in the next 30 days.
How do I fix CVE-2023-5680?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2023-5680?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST